Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Qc0jK4AMGSjPgGWna4wHaT7SDmk.roa
File: Qc0jK4AMGSjPgGWna4wHaT7SDmk.roa (raw, json)
Hash identifier: S9nEpZjBOCH4z3V6Iz5u6+ysgtHZgA2fF9UnnkZUPY8=
Subject key identifier: 41:CD:23:2B:80:0C:19:28:CF:80:65:A7:6B:8C:07:69:3E:D2:0E:69
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01856CE636EB94DE3CAAF4ED4AFDB9751D15
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Qc0jK4AMGSjPgGWna4wHaT7SDmk.roa
Signing time: Sun 01 Jan 2023 10:35:04 +0000
ROA not before: Sun 01 Jan 2023 10:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31577
IP address blocks: 83.147.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:36:eb:94:de:3c:aa:f4:ed:4a:fd:b9:75:1d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 10:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41cd232b800c1928cf8065a76b8c07693ed20e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:f1:26:8b:f4:65:83:ad:e6:e1:2e:1b:b9:
b3:00:06:8a:8e:45:72:cc:d5:4e:9a:0d:d7:e7:1f:
48:28:a7:64:43:58:b2:57:36:4e:6f:a9:66:cd:d2:
3b:0b:c0:47:b8:f3:f9:fd:66:81:20:ea:b6:ce:72:
6e:4a:77:ca:36:1e:85:38:da:18:da:59:d1:c2:20:
ab:48:c4:21:3f:e7:01:54:99:23:15:b6:d5:20:e7:
a0:a9:00:49:c2:78:cd:d5:45:fa:fe:17:64:8f:4e:
57:c7:76:db:2a:2f:93:b8:9a:96:8c:3f:47:02:9e:
5a:3f:ff:99:94:fc:de:f7:f9:14:82:23:74:97:11:
12:9d:f8:21:14:36:4e:e5:b4:3a:80:3d:ea:5b:42:
c6:20:cb:50:c6:c6:22:96:95:a7:e4:16:c3:86:d3:
3a:39:3c:c2:1a:eb:fd:56:e3:c3:38:bb:1a:26:2f:
37:84:bb:01:ec:12:52:41:48:60:80:60:bb:49:42:
9c:c6:80:9a:f0:af:ca:13:d5:40:27:56:8c:1e:0b:
27:1d:85:f8:1c:82:b0:cc:4e:ca:6c:8e:1d:18:47:
29:92:a1:bc:15:81:46:55:63:51:d8:ed:f4:9d:b9:
11:c3:ce:8f:d1:9f:72:7e:7c:78:f7:91:7d:ae:57:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CD:23:2B:80:0C:19:28:CF:80:65:A7:6B:8C:07:69:3E:D2:0E:69
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Qc0jK4AMGSjPgGWna4wHaT7SDmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:00:46:81:ae:04:d2:28:98:a9:dd:e5:ce:db:8d:f7:9e:12:
12:88:ae:58:2d:6b:72:10:06:ea:14:ea:49:9a:96:4a:ee:21:
4f:e3:2f:31:c0:b7:07:b1:b7:fe:e0:1f:10:31:94:c4:7d:f1:
a6:0d:84:4d:22:25:9a:bf:03:28:27:12:ae:27:eb:7b:5f:4c:
a7:be:3f:b7:bb:28:08:77:3b:6f:25:c3:d9:8c:cd:90:67:7b:
91:70:26:94:98:76:4b:3f:f3:77:5b:dd:e5:e2:bc:dc:c7:e1:
cf:ba:75:86:32:56:90:a7:56:da:0c:59:a8:ae:7a:2b:82:bc:
be:82:ae:9e:96:e1:cb:dc:a1:10:30:16:c3:ca:57:94:33:7d:
ef:7e:1b:2e:2e:05:32:93:73:c9:4e:72:4e:f1:94:ec:2b:b8:
ee:8a:ae:b6:df:08:5b:8a:26:29:a2:e6:1b:6d:44:ba:92:ea:
5a:b4:9f:1e:4c:ae:6b:c3:15:36:db:68:62:33:35:85:48:98:
88:91:f4:c6:8f:32:6d:61:01:0c:31:e2:ff:cf:4e:ce:c9:84:
7f:32:69:97:8c:fa:b4:61:84:39:bb:30:b0:80:1e:f6:e6:ce:
09:5b:aa:86:54:22:f6:11:8e:d0:2c:2a:41:90:a5:b4:bc:06:
1a:8e:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org